RepoJournal
Rails @rails
159 wires and counting

$ follow Rails

Keep up with Rails in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-27
stories 32
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

ACTIVE STORAGE CRASH FIXED, JBUILDER PATCHED

By RepoJournal · Filed · About Rails · Composed from the cited sources · methodology

arpitjain099 55728 bdewater-thatch
3 people shipped this
arpitjain099 @arpitjain099 2 cited 55728 @55728 1 cited bdewater-thatch @bdewater-thatch 1 cited

Rails plugged a critical crash in direct uploads when touch_attachment_records is disabled, while jbuilder shipped a one-line fix for a regression that broke partials with extra locals.

The Rails team fixed a nasty bug where disabling ActiveStorage.touch_attachment_records would crash on direct upload workflows [1]. This wasn't a theoretical edge case: it happened when attaching existing Blobs to records, and it cascaded from a prior refactor. Ship this fix before your next deploy if you're using that config. In parallel, jbuilder 2.15.1 landed a quick revert to fix partials for Active Model when extra locals are passed in [2]. That regression snuck in recently and broke downstream code; the patch is surgical. Rails core also tightened multiparameter attribute parsing to throw proper MultiparameterAssignmentErrors instead of raw NoMethodErrors when keys are malformed [3]. And Active Job got a new capability: job backends can now inspect the job itself in the stopping? callback, letting Solid Queue and Good Job pause long-running continuations based on queue attributes [4]. Finally, security hardening swept across sprockets and activeresource with explicit GitHub Actions workflow permissions pinned to contents: read [5], [6].

Action items

References

  1. [1] Prevent `ActiveStorage.touch_attachment_records = false` from crashing the attachment of a Blob rails/rails ↗
  2. [2] v2.15.1 ↗ rails/jbuilder
  3. [3] Fix `NoMethodError` for malformed multiparameter attribute keys ↗ rails/rails
  4. [4] Active Job: pass job to `stopping?` for fine-grained control over interruption ↗ rails/rails
  5. [5] ci: add explicit workflow-level permissions to ci ↗ rails/sprockets
  6. [6] ci: add permissions: contents: read to ci ↗ rails/activeresource

$ ls rails/reviews/ # the step-back reads

the week in review Ractor-ready Active Record and Active Job land in Rails the month in review Herb becomes Rails 8.2 default
Full archive → Weekly reviews →

Quick answers

What shipped in Rails on May 27, 2026?
Rails plugged a critical crash in direct uploads when touch_attachment_records is disabled, while jbuilder shipped a one-line fix for a regression that broke partials with extra locals. In total, 20 commits, 11 pull requests, and 1 releases landed.
Who contributed to Rails on May 27, 2026?
3 developers shipped this update, including 55728, bdewater-thatch, and arpitjain099.
What were the notable Rails updates?
Prevent `ActiveStorage.touch_attachment_records = false` from crashing the attachment of a Blob, v2.15.1, and Fix `NoMethodError` for malformed multiparameter attribute keys.
♥

$ log @rails --recent

Attribute-read regression fixed, decimal numericality corrected 79 shipped in_order_of double-serializes values, id_value alias restored 50 shipped Inlined attribute writers, leaner ActiveRecord::Key 31 shipped MySQL 5.6 falls off the support floor as Arel stops rebuilding literals 27 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl standardizes low-precision rollout kernels on DeepGEMM Agent Security Guardrails exposes hooks over HTTP, certifi floor raised in agent-scan

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.